Privacy Policy

1. Data controller

The controller of the personal data collected through the website and commercial services presented as Trade Stitches is:

For privacy-related requests (access, rectification, erasure, restriction, portability, objection and withdrawal of consent where applicable) you may write to the address above with subject line: "Privacy — data subject request".

2. Purposes of processing

We process personal data to let you use the Trade Stitches website, customise and purchase embroidered products, manage the contractual relationship, comply with legal obligations (accounting, tax, anti-fraud where applicable) and send communications strictly related to your order or requested service.

3. Categories of personal data

In particular we may process, among others, the following data:

• Identity and contact details: name (or company name), email address, telephone number.
• Addresses: delivery address and, where provided, billing address.
• Order data: items selected, embroidery options, amounts, order references, operational notes required for fulfilment.
• Content you upload: for example logo files or images for production, within the limits of what you voluntarily provide.
• Technical data: system logs, IP address, cookies or session identifiers needed for secure operation of the site and, where applicable, consent for non-essential cookies.

4. Payments via Stripe

Card and other supported payments are processed by Stripe Payments Europe Ltd. (or another applicable Stripe entity) as an independent controller of the data required for the transaction (e.g. tokenised card data, payment status). We do not store your full card number on our servers.

Please see Stripe’s privacy notice: stripe.com/privacy.

5. Notifications via Resend

We use Resend, Inc. to send transactional and operational emails (order confirmations, proof/production updates, shipping, service-related messages) as a processor or sub-processor under applicable contract terms. Messages relate to your relationship with us; we do not use Resend for unsolicited marketing profiling unless you have given separate, revocable consent where required by law.

Resend’s privacy notice: resend.com/legal/privacy-policy.

6. Order fulfilment and our suppliers

To fulfil your order (production, logistics or integration with our operational workflow) we may transmit to our suppliers the shipping data and order details strictly necessary to prepare and deliver the goods (including, by way of example, name, delivery address, order lines and product-specific customisation details).

Our suppliers act as independent controllers or as processors depending on the contractual arrangements in place; in any event, transfer is limited to what is necessary to perform the purchase contract you have entered into with Trade Stitches LTD.

7. Account and authentication (Supabase)

Secure access to your profile and cart may use services provided by Supabase Inc. (database hosting, authentication). Account data (e.g. email) are processed to enable login, sessions and security. See Supabase’s documentation and privacy policy for details of processing on their side.

8. Legal basis (GDPR)

We process data on the basis of performance of a contract (Art. 6(1)(b) GDPR) where necessary to conclude or manage your order; consent (Art. 6(1)(a)) where required (e.g. non-essential cookies, optional communications); legitimate interests (Art. 6(1)(f)) for security, abuse prevention and service improvement, within proportionality limits; legal obligation (Art. 6(1)(c)) where applicable.

9. Retention

We keep data for as long as necessary for the purposes described above and thereafter for periods required by applicable accounting and tax law in the United Kingdom or, for EU customers, as long as needed to defend rights in or out of court, unless earlier erasure or anonymisation is possible.

10. Transfers to third countries

Some providers (e.g. Stripe, Resend, Supabase) may process data outside the European Economic Area or the United Kingdom. Where applicable, we use appropriate safeguards (e.g. EU Commission standard contractual clauses or equivalents) and proportionate risk assessments.

12. Your rights

You have the right to request access, rectification, erasure, restriction of processing, data portability for data you provide in a structured format, objection to processing based on legitimate interests, and withdrawal of consent where processing is based on consent. Contact us at sales@tradestitches.com. You may also lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom if you believe processing infringes applicable law.

13. Changes

We may update this notice to reflect legal or technical changes. The last updated date is shown at the top of the page; for material changes, where the law requires, we will provide an appropriate further notice.